{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e8d0be6c-93bd-57b6-a001-1f2d070af2ef", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11", "version": "9.0.46-tuxcare.11", "pedigree": { "ancestors": [ { "name": "tomcat", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46", "type": "library", "group": "org.apache.tomcat", "version": "9.0.46" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2008-1947", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:e1071a09-be5e-50e0-ad84-eceeacffa142", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-1947 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2013-4590", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:9a3f7536-0edb-5169-870f-6a33c7855be5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4590 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2015-5174", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:9d8ac8f0-8afa-5a63-bd5c-f1a760a8f47e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5174 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2015-5346", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:5f39a428-2f4c-5067-ae8a-dd345eb2e73c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5346 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-0706", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:22f5ef5d-8dd2-59e1-9667-64d8d4c237a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0706 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-0762", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:cf60f76c-d922-51a2-b0a7-5a063277fc57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0762 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-0763", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:1dda86ef-a742-54f0-a6e2-88273da41977", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0763 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6794", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:9b50e636-295f-55cc-9fb1-0a7b5546462a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6794 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6796", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:fe4840a2-45b3-547e-be02-e243a819df29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6796 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6797", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:e92813bd-bfe6-567d-9c95-fb9ae437c816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6797 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6817", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:ae0c0d2b-8ff4-58cb-92e2-49c9023553fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6817 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-8747", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:734eebc5-58ee-5d65-a82e-145be9d65235", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-8747 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-5647", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:bb80ad0f-efc3-5613-9f97-9fd8df1cebc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5647 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-5650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:edd32119-f544-5b2e-82af-e82609f4c2c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5650 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-5664", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:d0897129-559c-586b-a1a5-17314d72e5dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5664 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-7674", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:ba790fd0-2b97-5fe5-81fc-7706358a74b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7674 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-7675", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:22081bbf-1abe-5141-8ccb-aca71b2a5a92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7675 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2019-0221", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:8e74a9f7-7daf-54bd-a6da-25c6215dcb98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0221 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2019-17569", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:298b7614-955e-585c-9c03-48f63a3d7ffd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17569 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2020-11996", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:b75a441e-5f92-51b1-bd2d-eabfb49fa665", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-11996 does not affect version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat. Version 9.0.46 is not vulnerable. Summary: The target repository is NOT vulnerable to CVE-2020-11996. It contains both the initial fix (commit 9a0231683a) and a subsequent optimization (commit f258efef6c) that prevent the DoS vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2020-13934", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:4cba7b04-ebfa-520c-b816-84f025c679a8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-13934 does not affect version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat. CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36", "justification": "code_not_present" } }, { "id": "CVE-2020-13935", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:5d2072b3-d8f7-56fd-b27f-4e3597a0d254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13935 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2020-1935", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:3e15b77c-25c9-57cf-b549-bdbf128077dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1935 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2020-8022", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:5818a148-50ec-5a38-92a1-4f5c4e481462", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat 9.0.46-tuxcare.11." } }, { "id": "CVE-2021-30639", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:17a0ee67-6764-57f2-bc2f-f2f215a73173", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-30639 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-30640", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:b006b479-667b-543a-8ba9-9abebb58155e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-30640 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-33037", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:15c57130-265f-55a7-8bdf-c1bdc92365a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-41079", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:b609663d-144c-5f33-b820-acf51bb2fa9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-41079 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-42340", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:7845f520-6772-52a2-ba88-251cdddf1338", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-43980", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:d015abfc-6529-565e-998a-28882a75f9d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-23181", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:ebcc76d2-e7a9-5592-bc3b-71d1f519b4a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-25762", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:8c979aea-ec01-523d-8a4b-ab004f4c861d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-25762 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-29885", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:e8bd720b-23e5-56b1-b125-ca740051f890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-34305", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:e965826d-e431-56c5-b5e7-1abc8dbaf5bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34305 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2023-41080", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:28359631-c52a-55fc-893d-e59d5f4d57bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2023-42795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:c3985f0a-9c4d-5ff3-bb70-47d5fdbe4688", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2023-45648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:ec4735e3-c3b2-5891-a22c-c2fa9f254b7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:2941cf1e-f5a4-559b-b3a0-72b34a16884f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-54677 does not affect version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:3176b1f1-9276-521c-9802-a60cf7dc0eaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:20a7c012-759b-56be-9b4c-cc131083936d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:abc6079f-6d9b-52ec-bb4a-8b967cfc1e7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:cb20225a-9e35-5eee-80cf-e0c9167f3d98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:f216f94e-22a1-527e-a115-f7641afcd46e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:c16a65fe-b169-51e8-85d5-127845d3473b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-29129", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:9b892e05-b579-51a6-985d-13f42f640517", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29129 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:fcbf6b2d-fbb1-5d11-bca3-115745c396bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29145 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:9beeb64b-a345-5d32-91bb-f7f95adb40d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:c2c344d2-835b-55b7-b21d-00af7b166e14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:1670d7c4-435b-5193-a99f-7273bacb55f4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-34483 does not affect version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat. Version 9.0.46 is not vulnerable. Summary: CVE-2026-34483 does NOT affect Tomcat 9.0.46. The vulnerable component JsonAccessLogValve was introduced in version 9.0.74 (April 2023), almost 2 years after version 9.0.46 was released (May 2021). The target version predates the introduction of the vulnerable feature. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:b4349235-9fc8-57d9-9af2-ab130cf2e9fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:9e1cbbee-3f19-5257-b3c0-529b43133949", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:bcc01289-6162-5edf-aad6-0e210caac820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:d08b2c15-a81c-5074-a435-94ed4fbc57b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:4f54ae54-d49a-5b79-9cf0-481f27983ccd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:49456165-c901-5910-896d-3fba006fee3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:51423dd8-4c5a-5590-afd1-b12af1719c02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:de246fe6-3ee4-5991-8659-9a1dd861fb96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:814c4c38-f14e-5c56-8179-28cd216eae94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:2adb9ef9-d23c-5662-ab7c-be6f82051d2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65182 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:f535c451-63f5-5257-996d-f34a6690459f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ], "bom-ref": "urn:uuid:183fdc67-dd66-5a90-8142-dad14b13b932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68525 affects version 9.0.46-tuxcare.11 of org.apache.tomcat:tomcat." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.11" } ] }